$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/772646328A2311EF9D00094EC4F9AE02.roa File: 772646328A2311EF9D00094EC4F9AE02.roa (raw, json) Hash identifier: JFE7v5JyDLfpxZpXXTyJNax7kTMRicHsJoaOnqEYwkA= Subject key identifier: 90:FE:7A:D8:1D:47:53:48:55:F9:CA:A6:22:F1:91:9E:A0:FC:73:0E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9B99 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/772646328A2311EF9D00094EC4F9AE02.roa Signing time: Mon 14 Oct 2024 11:57:20 +0000 ROA not before: Mon 14 Oct 2024 11:57:20 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 153224 IP address blocks: 2001:df4:5640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39833 (0x9b99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 14 11:57:20 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=670d0720-1bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:a0:68:f7:f6:0b:14:48:18:bb:f3:27:75: 5a:6b:1d:71:dd:79:19:d1:a3:02:48:af:62:67:70: 1a:28:68:a5:39:eb:b3:53:1a:c2:7e:cc:27:44:ad: d0:fb:47:19:32:5b:6c:03:6b:9a:ee:3a:86:31:7a: 76:79:5d:0d:b3:ac:aa:3b:d1:92:0a:3d:24:58:c7: 5d:39:02:b8:4e:6b:58:31:e8:61:5a:b4:20:6b:4e: 75:9d:d1:d9:2a:b5:bd:09:5e:6b:3f:b5:c6:47:e3: 4e:f2:03:89:00:b8:d4:08:ee:f8:d9:37:ec:53:ca: 8d:bf:dc:2c:12:16:ac:ab:f7:19:fb:ec:41:af:c4: 0c:5e:fe:e5:7a:53:2c:b5:94:6f:34:d4:e7:f2:61: 8f:26:61:e3:16:3a:a9:eb:1c:c6:7c:1c:38:fb:5f: a9:f5:27:4b:19:32:9b:cc:45:c7:59:3b:09:70:ed: 86:ec:ab:31:a8:92:32:8b:f2:1d:a2:86:2c:29:ff: b9:50:7b:2f:3d:db:f0:5b:f2:45:bc:f9:74:fe:90: 0f:af:33:fd:bb:b5:ea:60:0b:1c:3f:31:10:13:b4: b6:a4:b4:68:d9:db:dc:e8:6f:9c:fe:aa:df:7e:21: 84:df:dc:be:db:1a:56:b4:b6:de:ff:4c:c6:01:e1: ac:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FE:7A:D8:1D:47:53:48:55:F9:CA:A6:22:F1:91:9E:A0:FC:73:0E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/772646328A2311EF9D00094EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:5640::/48 Signature Algorithm: sha256WithRSAEncryption af:15:dd:10:22:5b:2f:ee:03:12:3c:12:f3:65:6c:db:ab:cb: 39:c0:2c:be:2f:e9:ea:83:9c:26:0b:28:ce:bb:d1:c2:e6:72: 87:14:ce:c2:e1:95:93:6b:f2:b2:c3:9a:89:b3:e2:8d:a9:df: dd:51:ce:e5:3a:3d:1c:3b:b1:69:f8:38:78:11:b0:84:d0:c5: 11:60:11:16:9d:fc:c3:06:29:19:ba:71:84:22:d0:21:e2:27: e8:f1:cd:7c:22:4e:20:0c:86:5e:3c:b9:8f:f5:83:ce:8c:7f: 79:85:26:37:ec:2d:92:a4:ac:d1:fb:28:19:18:42:96:27:b4: 90:a7:6e:21:d3:39:da:8a:6a:e4:4e:05:f3:c7:ed:e4:78:5d: 75:6b:2a:49:56:ae:79:b9:35:5e:61:e6:76:80:65:d7:0b:b4: 9f:e8:63:05:9f:ca:2c:9a:4d:1b:61:6c:05:a1:9c:e4:b4:33: e4:c9:2c:8b:1c:39:3b:15:2c:59:a9:9d:58:34:b1:c9:e9:e8: 68:52:3b:65:74:2f:8f:cc:f2:a2:fc:a5:d9:fe:f6:70:65:3f: 23:35:61:ee:34:4c:29:dc:90:03:4d:4a:82:b7:e4:96:bf:2c: 2f:27:9d:d2:f9:63:f5:31:48:c2:30:ee:5e:c7:9f:04:9c:51: 9e:d2:db:a2 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAJuZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MTAxNDExNTcyMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjcwZDA3MjAtMWJmYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALngoGj39gsUSBi78yd1Wmsdcd15GdGjAkivYmdwGihopTnrs1Mawn7MJ0St 0PtHGTJbbANrmu46hjF6dnldDbOsqjvRkgo9JFjHXTkCuE5rWDHoYVq0IGtOdZ3R 2Sq1vQleaz+1xkfjTvIDiQC41Aju+Nk37FPKjb/cLBIWrKv3GfvsQa/EDF7+5XpT LLWUbzTU5/JhjyZh4xY6qescxnwcOPtfqfUnSxkym8xFx1k7CXDthuyrMaiSMovy HaKGLCn/uVB7Lz3b8FvyRbz5dP6QD68z/bu16mALHD8xEBO0tqS0aNnb3OhvnP6q 334hhN/cvtsaVrS23v9MxgHhrLECAwEAAaOCApgwggKUMB0GA1UdDgQWBBSQ/nrY HUdTSFX5yqYi8ZGeoPxzDjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc3MjY0NjMy OEEyMzExRUY5RDAwMDk0RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN9FZAMA0GCSqGSIb3DQEBCwUAA4IBAQCvFd0QIlsv 7gMSPBLzZWzbq8s5wCy+L+nqg5wmCyjOu9HC5nKHFM7C4ZWTa/Kyw5qJs+KNqd/d Uc7lOj0cO7Fp+Dh4EbCE0MURYBEWnfzDBikZunGEItAh4ifo8c18Ik4gDIZePLmP 9YPOjH95hSY37C2SpKzR+ygZGEKWJ7SQp24h0znaimrkTgXzx+3keF11aypJVq55 uTVeYeZ2gGXXC7Sf6GMFn8osmk0bYWwFoZzktDPkySyLHDk7FSxZqZ1YNLHJ6eho UjtldC+PzPKi/KXZ/vZwZT8jNWHuNEwp3JADTUqCt+SWvywvJ53S+WP1MUjCMO5e x58EnFGe0tui -----END CERTIFICATE-----Generated at Mon Nov 25 13:04:59 2024 by rpki-client on console-fra.rpki-client.org